$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wmTmHE8U9NoMqw76EBIxtVgTMZY.roa File: wmTmHE8U9NoMqw76EBIxtVgTMZY.roa (raw, json) Hash identifier: z8KBBIpa/dyOhx/xjAu7H941uaczEz7QUv4BPz2ulnU= Subject key identifier: C2:64:E6:1C:4F:14:F4:DA:0C:AB:0E:FA:10:12:31:B5:58:13:31:96 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2949 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wmTmHE8U9NoMqw76EBIxtVgTMZY.roa Signing time: Fri 01 Sep 2023 10:06:21 +0000 ROA not before: Fri 01 Sep 2023 10:06:21 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 106.1.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10569 (0x2949) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:06:21 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=C264E61C4F14F4DA0CAB0EFA101231B558133196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e0:5b:ab:13:86:95:5a:3b:b5:c0:74:85:01: 30:2c:91:8d:d6:4c:03:ba:19:fb:8e:78:59:51:a6: 11:2d:f0:61:e3:67:38:f3:70:ec:07:81:33:95:1f: 80:1a:f5:e1:24:d6:0a:5c:c9:9a:9a:6f:94:1a:0a: 74:cf:e6:00:93:31:53:e4:67:0a:42:3e:b0:f3:39: 1e:8a:a6:e8:49:85:f5:47:63:6f:2c:dc:0d:2e:85: 1f:dc:77:d5:f6:48:9b:65:8c:53:5f:68:8c:79:28: ac:f8:22:a7:f2:a0:5b:7a:5c:6f:96:f9:c4:cc:c8: fe:f7:bd:d9:53:c1:03:6f:b7:31:00:79:e0:de:28: 33:48:98:7a:dd:e5:9e:44:d3:8b:fb:36:9f:ea:94: d3:ea:87:e7:e8:be:5a:3c:ec:ee:64:c2:d8:32:a6: d0:30:a1:35:66:37:86:5f:c0:25:7a:65:a5:ad:f7: ca:65:ba:8b:5d:75:08:96:20:2b:c1:00:f7:19:74: 52:71:3c:92:42:9e:69:00:cd:96:e5:e4:ad:12:f2: 67:c6:6d:ac:aa:84:82:22:3c:17:dd:d2:8a:17:ae: ac:08:4d:74:9b:b9:91:2f:b1:b0:6c:32:7c:81:8a: 7d:3e:cd:2e:7a:ff:ba:55:2e:35:da:dd:d1:15:86: 41:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:64:E6:1C:4F:14:F4:DA:0C:AB:0E:FA:10:12:31:B5:58:13:31:96 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wmTmHE8U9NoMqw76EBIxtVgTMZY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.216.0/22 Signature Algorithm: sha256WithRSAEncryption 0f:d7:52:2f:77:d5:e4:9f:a5:6f:5c:08:43:3a:9d:ca:6f:5b: 32:07:00:92:9b:c0:66:53:ef:8f:78:eb:86:c2:a6:b9:2c:ba: 27:b7:57:c7:63:cf:5c:9a:74:61:b0:02:5c:3f:d5:b1:73:c0: 6e:5a:ff:bf:2e:60:6e:03:a2:bd:52:af:d7:eb:fb:b8:2c:01: 77:9c:00:ac:71:2c:05:8f:3f:4b:c7:41:27:6b:d9:85:25:06: 5c:b8:91:bf:3e:e2:b0:42:92:67:4d:fb:1a:3f:c7:c8:ae:54: 07:d4:19:b5:99:4d:38:01:cf:b1:c0:80:07:88:ac:78:c6:0a: d8:2d:ef:78:38:07:f9:95:32:45:e8:25:4c:36:2f:ae:77:fe: 2d:d4:c1:58:ad:fb:ff:b4:8d:5b:8c:fb:ad:8b:c5:34:4c:0b: 60:ea:a2:b1:c8:b3:ae:5c:50:a7:2b:22:e3:46:04:cf:bb:78: cd:3f:4d:2e:09:0c:83:a6:56:c9:68:7e:db:29:25:a3:06:33: 69:d7:81:84:8f:54:6e:a9:db:bd:bc:4e:5b:43:2f:ee:f9:84: 29:66:47:91:a4:d0:dc:33:85:19:db:bb:17:84:52:87:7b:a9: 18:a6:d1:c0:8d:9a:f4:11:07:36:e7:4e:3b:7e:65:ab:ce:31: fc:57:62:72 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKUkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA2MjFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEMyNjRFNjFDNEYxNEY0 REEwQ0FCMEVGQTEwMTIzMUI1NTgxMzMxOTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDe4FurE4aVWju1wHSFATAskY3WTAO6GfuOeFlRphEt8GHjZzjz cOwHgTOVH4Aa9eEk1gpcyZqab5QaCnTP5gCTMVPkZwpCPrDzOR6KpuhJhfVHY28s 3A0uhR/cd9X2SJtljFNfaIx5KKz4IqfyoFt6XG+W+cTMyP73vdlTwQNvtzEAeeDe KDNImHrd5Z5E04v7Np/qlNPqh+fovlo87O5kwtgyptAwoTVmN4ZfwCV6ZaWt98pl uotddQiWICvBAPcZdFJxPJJCnmkAzZbl5K0S8mfGbayqhIIiPBfd0ooXrqwITXSb uZEvsbBsMnyBin0+zS56/7pVLjXa3dEVhkHfAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUwmTmHE8U9NoMqw76EBIxtVgTMZYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3dtVG1IRThVOU5vTXF3NzZF Qkl4dFZnVE1aWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq AdgwDQYJKoZIhvcNAQELBQADggEBAA/XUi931eSfpW9cCEM6ncpvWzIHAJKbwGZT 749464bCprksuie3V8djz1yadGGwAlw/1bFzwG5a/78uYG4Dor1Sr9fr+7gsAXec AKxxLAWPP0vHQSdr2YUlBly4kb8+4rBCkmdN+xo/x8iuVAfUGbWZTTgBz7HAgAeI rHjGCtgt73g4B/mVMkXoJUw2L653/i3UwVit+/+0jVuM+62LxTRMC2DqorHIs65c UKcrIuNGBM+7eM0/TS4JDIOmVsloftspJaMGM2nXgYSPVG6p2728TltDL+75hClm R5Gk0NwzhRnbuxeEUod7qRim0cCNmvQRBzbnTjt+ZavOMfxXYnI= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:07 2024 by rpki-client on console-fra.rpki-client.org